The Sleuth Kit
4.2
|
Generic structure used to refer to files in the file system. More...
#include <tsk_fs.h>
Public Attributes | |
TSK_FS_INFO * | fs_info |
Pointer to file system that the file is located in. | |
TSK_FS_META * | meta |
Pointer to metadata of file (or NULL if name has invalid metadata address) | |
TSK_FS_NAME * | name |
Pointer to name of file (or NULL if file was opened using metadata address) | |
int | tag |
Generic structure used to refer to files in the file system.
A file will typically have a name and metadata. This structure holds that type of information. When deleted files are being processed, this structure may have the name defined but not metadata because it no longer exists. Or, if you are calling meta_walk and are not processing at the name level, then the name will not be defined. always check these to make sure they are not null before they are read.
Copyright © 2007-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.